Configuring Health Check

If you did not install Health Check with the Apply All Tanium recommended configurations option, you must enable and configure certain features.

Configure service account

The service account is a user that runs several background processes for Health Check. This user requires the Administrator reserved role.

For more information about Health Check permissions, see User role requirements.

If you imported Health Check with default settings, the service account is set to the account that you used to perform the import. Configuring a unique service account for each Tanium solution is an extra security measure to consider in consultation with the security team of your organization.

  1. From the Main menu, go to Shared Services > Health Check to open the Health Check Overview page.
  2. Click Settings and then click Service Account if needed.
  3. Update the service account settings and click Save.

If you are running Tanium Servers on Windows, ensure that you change the account that is used to run the Tanium Health Check service from LOCAL SYSTEM to an account that has access to the Tanium Servers and Zone Servers. Otherwise, the generated reports do not contain server information about the Tanium Servers and Zone Servers.

Set the collection schedule

You can set up automatic collection of TPAN reports. Run at least one report each week when most of your endpoints are online.

  1. On the Health Check Overview page, click Settings and then click Collection Schedule if needed.
  2. Select Enabled, choose at least one day, and select a time.

    If you select Disabled, you can manually run reports instead. For more information, see Run a TPAN report manually.

  3. Click Save.

Set the sharing preferences

If you have a valid license, you can choose to automatically share sanitized reports with Tanium. If you do not have an updated license or do not want to automatically share reports, you can download reports locally to share through other methods.

  1. On the Health Check Overview page, click Settings and then click Sharing if needed.
  2. To disable automatic sharing of reports, select Do not automatically share and click Save.
  3. To enable automatic sharing of reports, select Automatically share with Tanium and click Save.

    You cannot select Automatically share with Tanium if you do not have a valid license. For more information about how to configure Health Check for sharing reports, Contact Tanium Support.

Configure other settings

You can configure other settings such as the log verbosity and Health Check tuning parameters.

  1. On the Health Check Overview page, click Settings and then click Other Settings if needed.
  2. Configure the following settings:

    Log Level

    Level of logging detail for Tanium Health Check and Tanium Platform Analyzer (TPAN)

    Number of reports to keep on disk

    Rolling number of TPAN reports that you want to keep on disk

    Info Page collection schedule

    How often the info page is gathered in the background

    Metrics collection schedule

    How often the metrics page is gathered in the background

    VDI in use

    Used for the server Tuning report

    Active-Active 50/50?

    Select Yes if you have a high availability (HA) deployment of Tanium servers

    Bandwidth Limit

    Used for the server Tuning report

  3. Click Save.